Attachment 875921 Details for Bug 1075118 – console output of ipa replica install

console output of ipa replica install

console-ipareplica-install-output.txt (text/plain), 6.23 KB, created by Kaleem on 2014-03-18 12:51:31 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Kaleem

Created: 2014-03-18 12:51:31 UTC

Size: 6.23 KB

patch

obsolete

>:: [ 18:08:40 ] ::  RUN ipa-replica-install
>Run connection check to master
>Check connection from replica to remote master 'dell-pe830-02.testrelm.test':
>   Directory Service: Unsecure port (389): OK
>   Directory Service: Secure port (636): OK
>   Kerberos KDC: TCP (88): OK
>   Kerberos Kpasswd: TCP (464): OK
>   HTTP Server: Unsecure port (80): OK
>   HTTP Server: Secure port (443): OK
>
>The following list of ports use UDP protocol and would need to be
>checked manually:
>   Kerberos KDC: UDP (88): SKIPPED
>   Kerberos Kpasswd: UDP (464): SKIPPED
>
>Connection from replica to master is OK.
>Start listening on required ports for remote master check
>Get credentials to log in to remote master
>Check SSH connection to remote master
>Execute check on remote master
>Check connection from master to remote replica 'rhel70-replica.testrelm.test':
>   Directory Service: Unsecure port (389): OK
>   Directory Service: Secure port (636): OK
>   Kerberos KDC: TCP (88): OK
>   Kerberos KDC: UDP (88): OK
>   Kerberos Kpasswd: TCP (464): OK
>   Kerberos Kpasswd: UDP (464): OK
>   HTTP Server: Unsecure port (80): OK
>   HTTP Server: Secure port (443): OK
>
>Connection from master to replica is OK.
>
>Connection check OK
>Configuring NTP daemon (ntpd)
>  [1/4]: stopping ntpd
>  [2/4]: writing configuration
>  [3/4]: configuring ntpd to start on boot
>  [4/4]: starting ntpd
>Done configuring NTP daemon (ntpd).
>Configuring directory server (dirsrv): Estimated time 31 minutes
>  [1/34]: creating directory server user
>  [2/34]: creating directory server instance
>  [3/34]: adding default schema
>  [4/34]: enabling memberof plugin
>  [5/34]: enabling winsync plugin
>  [6/34]: configuring replication version plugin
>  [7/34]: enabling IPA enrollment plugin
>  [8/34]: enabling ldapi
>  [9/34]: configuring uniqueness plugin
>  [10/34]: configuring uuid plugin
>  [11/34]: configuring modrdn plugin
>  [12/34]: configuring DNS plugin
>  [13/34]: enabling entryUSN plugin
>  [14/34]: configuring lockout plugin
>  [15/34]: creating indices
>  [16/34]: enabling referential integrity plugin
>  [17/34]: configuring ssl for ds instance
>  [18/34]: configuring certmap.conf
>  [19/34]: configure autobind for root
>  [20/34]: configure new location for managed entries
>  [21/34]: configure dirsrv ccache
>  [22/34]: enable SASL mapping fallback
>  [23/34]: restarting directory server
>  [24/34]: setting up initial replication
>Starting replication, please wait until this has completed.
>Update in progress, 17 seconds elapsed
>Update succeeded
>
>  [25/34]: updating schema
>  [26/34]: setting Auto Member configuration
>  [27/34]: enabling S4U2Proxy delegation
>  [28/34]: initializing group membership
>  [29/34]: adding master entry
>  [30/34]: configuring Posix uid/gid generation
>  [31/34]: adding replication acis
>  [32/34]: enabling compatibility plugin
>  [33/34]: tuning directory server
>  [34/34]: configuring directory to start on boot
>Done configuring directory server (dirsrv).
>Configuring certificate server (pki-tomcatd): Estimated time 33 minutes 30 seconds
>  [1/19]: creating certificate server user
>  [2/19]: configuring certificate server instance
>  [3/19]: stopping certificate server instance to update CS.cfg
>  [4/19]: disabling nonces
>  [5/19]: set up CRL publishing
>  [6/19]: starting certificate server instance
>  [7/19]: creating RA agent certificate database
>  [8/19]: importing CA chain to RA certificate database
>  [9/19]: fixing RA database permissions
>  [10/19]: setting up signing cert profile
>  [11/19]: set certificate subject base
>  [12/19]: enabling Subject Key Identifier
>  [13/19]: enabling CRL and OCSP extensions for certificates
>  [14/19]: setting audit signing renewal to 2 years
>  [15/19]: configuring certificate server to start on boot
>  [16/19]: configure certmonger for renewals
>  [17/19]: configure clone certificate renewals
>  [18/19]: configure Server-Cert certificate renewal
>  [19/19]: Configure HTTP to proxy connections
>Done configuring certificate server (pki-tomcatd).
>Restarting the directory and certificate servers
>Configuring Kerberos KDC (krb5kdc): Estimated time 30 minutes 30 seconds
>  [1/9]: adding sasl mappings to the directory
>  [2/9]: writing stash file from DS
>  [3/9]: configuring KDC
>  [4/9]: creating a keytab for the directory
>  [5/9]: creating a keytab for the machine
>  [6/9]: adding the password extension to the directory
>  [7/9]: enable GSSAPI for replication
>  [8/9]: starting the KDC
>  [9/9]: configuring KDC to start on boot
>Done configuring Kerberos KDC (krb5kdc).
>Configuring kadmin
>  [1/2]: starting kadmin 
>  [2/2]: configuring kadmin to start on boot
>Done configuring kadmin.
>Configuring ipa_memcached
>  [1/2]: starting ipa_memcached 
>  [2/2]: configuring ipa_memcached to start on boot
>Done configuring ipa_memcached.
>Configuring the web interface (httpd): Estimated time 31 minutes
>  [1/13]: setting mod_nss port to 443
>  [2/13]: setting mod_nss password file
>  [3/13]: enabling mod_nss renegotiate
>  [4/13]: adding URL rewriting rules
>  [5/13]: configuring httpd
>  [6/13]: setting up ssl
>  [7/13]: publish CA cert
>  [8/13]: creating a keytab for httpd
>  [9/13]: clean up any existing httpd ccache
>  [10/13]: configuring SELinux for httpd
>  [11/13]: configure httpd ccache
>  [12/13]: restarting httpd
>  [13/13]: configuring httpd to start on boot
>Done configuring the web interface (httpd).
>Configuring ipa-otpd
>  [1/2]: starting ipa-otpd 
>  [2/2]: configuring ipa-otpd to start on boot
>Done configuring ipa-otpd.
>Applying LDAP updates
>Restarting the directory server
>Restarting the KDC
>Restarting the certificate server
>Using reverse zone 207.65.10.in-addr.arpa.
>Configuring DNS (named)
>  [1/9]: adding NS record to the zone
>  [2/9]: setting up reverse zone
>  [3/9]: setting up our own record
>  [4/9]: setting up CA record
>  [5/9]: setting up kerberos principal
>  [6/9]: setting up named.conf
>  [7/9]: restarting named
>  [8/9]: configuring named to start on boot
>  [9/9]: changing resolv.conf to point to ourselves
>Done configuring DNS (named).
>
>Global DNS configuration in LDAP server is empty
>You can use 'dnsconfig-mod' command to set global DNS options that
>would override settings in local named.conf files
>
>Restarting the web server
>:: [   PASS   ] :: Running ' /usr/sbin/ipa-replica-install -U --setup-ca --setup-dns --forwarder=10.65.201.89 -w Secret123 -p Secret123 /opt/rhqa_ipa/replica-info-rhel70-replica.testrelm.test.gpg' (Expected 0, got 0)
>

Actions: View

Attachments on bug 1075118: 873161 | 875921